Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JwO_2yR2C7h87P9l_IZGzmjOj7c.cer
File:                     JwO_2yR2C7h87P9l_IZGzmjOj7c.cer (raw, json)
Hash identifier:          ztmDjUbNVkD+ozRf+5dvouY4sIAd4fac15gzxRNC+Jo=
Subject key identifier:   27:03:BF:DB:24:76:0B:B8:7C:EC:FF:65:FC:86:46:CE:68:CE:8F:B7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/JwO_2yR2C7h87P9l_IZGzmjOj7c.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:06:49 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 1.2.2.0/24
                          IP: 1.4.4.0/24
                          IP: 1.8.0.0 -- 1.8.17.255
                          IP: 1.8.19.0 -- 1.8.255.255
                          IP: 103.235.132.0/22
                          IP: 210.2.0.0/22
                          IP: 210.2.5.0 -- 210.2.15.255

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30706 (0x77f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:06:49 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=2703BFDB24760BB87CECFF65FC8646CE68CE8FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:05:f5:28:3b:aa:e1:18:74:7f:d8:80:62:
                    be:94:1d:c2:72:5e:b7:1b:b5:6a:96:77:45:f2:fb:
                    85:bd:66:07:24:97:fe:aa:74:94:aa:61:25:f6:d3:
                    26:b5:96:93:77:58:e9:d2:0d:2b:ba:46:37:9e:94:
                    23:5e:a5:a3:4e:12:4a:c0:a7:b7:2d:bd:c9:20:33:
                    fe:d1:0d:43:c6:1b:d9:89:1d:1e:66:18:c4:0b:5c:
                    f5:d2:ba:ff:d4:f5:ee:36:f6:c2:e1:18:14:0f:e0:
                    69:25:9f:66:b1:55:ef:f3:4b:01:73:9d:7f:0d:48:
                    3a:04:a8:5d:97:b0:d2:f1:71:a7:4a:0f:08:6b:61:
                    10:9a:08:77:08:ab:95:aa:68:73:d8:54:4e:9a:28:
                    37:97:ba:8c:2d:ae:1d:f8:7f:82:0a:5c:11:05:82:
                    58:90:51:3d:06:a8:87:78:d2:6e:60:95:ff:89:93:
                    40:38:91:c0:0c:e8:8d:11:70:0f:93:a0:fc:5f:c2:
                    24:32:e7:d9:f1:9b:f8:9c:38:b9:7c:39:43:48:54:
                    bd:0c:22:16:05:26:e7:ae:cc:3d:93:8a:4f:7f:84:
                    1c:b9:ef:09:f7:f3:18:ce:59:30:91:91:19:39:cf:
                    3a:8f:2b:49:af:88:69:f7:64:73:53:08:4e:46:94:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:03:BF:DB:24:76:0B:B8:7C:EC:FF:65:FC:86:46:CE:68:CE:8F:B7
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/JwO_2yR2C7h87P9l_IZGzmjOj7c.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.2.2.0/24
                  1.4.4.0/24
                  1.8.0.0-1.8.17.255
                  1.8.19.0-1.8.255.255
                  103.235.132.0/22
                  210.2.0.0/22
                  210.2.5.0-210.2.15.255

    Signature Algorithm: sha256WithRSAEncryption
         32:4c:35:0e:33:8e:dc:15:4e:ae:85:5d:7a:a5:d4:38:d9:60:
         dc:f7:fb:d3:21:38:02:23:4f:86:92:ec:24:6e:75:16:87:b4:
         3c:58:42:5b:1c:2d:12:f3:cd:54:cb:1c:b3:6a:09:d0:dd:f0:
         6c:6f:47:0a:55:29:2e:62:52:01:f0:c0:72:0a:67:16:e0:f3:
         e3:8e:f4:8d:96:4a:d5:f7:eb:0b:97:a0:b8:3d:ed:b5:03:00:
         91:8c:07:49:ba:63:a1:59:6d:fb:ba:4e:11:d7:e1:bd:2c:00:
         99:a1:a6:22:84:a1:e4:b8:35:38:51:fd:44:17:37:75:36:50:
         da:04:33:df:38:92:76:50:5f:b7:66:c2:ea:47:2b:78:67:da:
         91:0e:50:40:03:a4:61:e4:2b:d9:e1:c9:62:39:d0:c7:b8:dc:
         1c:0e:9f:ec:19:4e:d2:a1:cb:9e:f5:24:fb:65:af:7b:b2:49:
         f5:67:03:1b:9c:b3:6d:f4:9a:d6:96:56:aa:36:ba:1e:5f:af:
         c2:ad:ce:c6:4b:f7:cf:8e:96:0e:5a:a0:99:fb:2d:fb:3a:05:
         8e:a4:76:b5:ac:c8:75:b3:56:fd:3d:d5:b8:b1:86:7c:11:e7:
         e1:8d:10:61:56:ab:c5:49:cd:0c:e4:3a:bf:a9:4e:8a:a5:f0:
         1a:b5:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----